Hello, [(${input})]!
---- [source,html] ----Hello, [[${input}]]!
---- === How does this work? include::../../common/fix/data_encoding.adoc[] For HTML encoding, Javascript encoding, and CSS encoding, the documentation allows the use of `unescaped text`, in only two different ways: * with the attribute `th:utext`. * with the inline expression `[(...)]`. If you insert third party data into the pages, the regular attributes are preferable: * with the attribute `th:text`. * The inline expression `[[...]]`. They ensure that the correct encoding is used, regardless of the context in which the user-controlled data is inserted. Thus, it is not necessary to specify a particular encoder. === Pitfalls include::../../common/pitfalls/validation.adoc[]